After installing the November KB3004394 update on Windows 7 and Windows 2008 R2, problems appeared with installing subsequent updates.
An incorrectly implemented update mechanism for CRL lists causes difficulties with signature verification.
Solution: uninstall KB3004394 or install KB3024777.
More: KB3024777